The same incident should not need you twice.

Recurring pages, the same runbook, the same people. Symptom cleared, cause still in the path. That’s not an incident problem anymore. It’s a reliability problem.

For teams that have already had the night and don’t want the sequel. Not a Well-Architected product, not a certification pass, not a review that leaves with the consultant.

Starts as a diagnostic unless you’ve just had the incident — then it may start as recovery and become this. I stay long enough that the class doesn’t come back.